mirror of
https://github.com/go-gitea/gitea.git
synced 2026-06-30 05:28:06 +02:00
124 lines
4.0 KiB
Go
124 lines
4.0 KiB
Go
// Copyright 2026 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package projects
|
|
|
|
import (
|
|
"net/http"
|
|
"testing"
|
|
|
|
org_model "code.gitea.io/gitea/models/organization"
|
|
project_model "code.gitea.io/gitea/models/project"
|
|
"code.gitea.io/gitea/models/unittest"
|
|
user_model "code.gitea.io/gitea/models/user"
|
|
"code.gitea.io/gitea/services/contexttest"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestCanWriteProjectWorkflows(t *testing.T) {
|
|
unittest.PrepareTestEnv(t)
|
|
|
|
t.Run("repo owner can write", func(t *testing.T) {
|
|
ctx, _ := contexttest.MockContext(t, "/user2/repo1/projects/1/workflows")
|
|
contexttest.LoadUser(t, ctx, 2)
|
|
contexttest.LoadRepo(t, ctx, 1)
|
|
|
|
assert.True(t, canWriteProjectWorkflows(ctx, &project_model.Project{Type: project_model.TypeRepository}))
|
|
})
|
|
|
|
t.Run("repo reader cannot write", func(t *testing.T) {
|
|
ctx, _ := contexttest.MockContext(t, "/user2/repo1/projects/1/workflows")
|
|
contexttest.LoadRepo(t, ctx, 1)
|
|
|
|
assert.False(t, canWriteProjectWorkflows(ctx, &project_model.Project{Type: project_model.TypeRepository}))
|
|
})
|
|
|
|
t.Run("individual owner can write", func(t *testing.T) {
|
|
ctx, _ := contexttest.MockContext(t, "/user2/-/projects/4/workflows")
|
|
contexttest.LoadUser(t, ctx, 2)
|
|
ctx.ContextUser = unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: 2})
|
|
|
|
assert.True(t, canWriteProjectWorkflows(ctx, &project_model.Project{Type: project_model.TypeIndividual}))
|
|
})
|
|
|
|
t.Run("individual reader cannot write", func(t *testing.T) {
|
|
ctx, _ := contexttest.MockContext(t, "/user2/-/projects/4/workflows")
|
|
contexttest.LoadUser(t, ctx, 1)
|
|
ctx.ContextUser = unittest.AssertExistsAndLoadBean(t, &user_model.User{ID: 2})
|
|
|
|
assert.False(t, canWriteProjectWorkflows(ctx, &project_model.Project{Type: project_model.TypeIndividual}))
|
|
})
|
|
|
|
t.Run("org owner can write", func(t *testing.T) {
|
|
ctx, _ := contexttest.MockContext(t, "/org3/-/projects/4/workflows")
|
|
contexttest.LoadUser(t, ctx, 2)
|
|
org := unittest.AssertExistsAndLoadBean(t, &org_model.Organization{ID: 3})
|
|
ctx.ContextUser = org.AsUser()
|
|
ctx.Org.Organization = org
|
|
|
|
assert.True(t, canWriteProjectWorkflows(ctx, &project_model.Project{Type: project_model.TypeOrganization}))
|
|
})
|
|
|
|
t.Run("org visitor cannot write", func(t *testing.T) {
|
|
ctx, _ := contexttest.MockContext(t, "/org3/-/projects/4/workflows")
|
|
org := unittest.AssertExistsAndLoadBean(t, &org_model.Organization{ID: 3})
|
|
ctx.ContextUser = org.AsUser()
|
|
ctx.Org.Organization = org
|
|
|
|
assert.False(t, canWriteProjectWorkflows(ctx, &project_model.Project{Type: project_model.TypeOrganization}))
|
|
})
|
|
}
|
|
|
|
func TestWorkflowsRepoPageSetsCanWriteProjects(t *testing.T) {
|
|
unittest.PrepareTestEnv(t)
|
|
|
|
t.Run("repo owner sees writable workflow page", func(t *testing.T) {
|
|
ctx, resp := contexttest.MockContext(t, "/user2/repo1/projects/1/workflows")
|
|
contexttest.LoadUser(t, ctx, 2)
|
|
contexttest.LoadRepo(t, ctx, 1)
|
|
ctx.SetPathParam("id", "1")
|
|
|
|
Workflows(ctx)
|
|
|
|
require.Equal(t, http.StatusOK, resp.Code)
|
|
assert.Equal(t, true, ctx.Data["CanWriteProjects"])
|
|
})
|
|
|
|
t.Run("repo reader sees readonly workflow page", func(t *testing.T) {
|
|
ctx, resp := contexttest.MockContext(t, "/user2/repo1/projects/1/workflows")
|
|
contexttest.LoadRepo(t, ctx, 1)
|
|
ctx.SetPathParam("id", "1")
|
|
|
|
Workflows(ctx)
|
|
|
|
require.Equal(t, http.StatusOK, resp.Code)
|
|
assert.Equal(t, false, ctx.Data["CanWriteProjects"])
|
|
})
|
|
}
|
|
|
|
func TestWorkflowsReadEndpoints(t *testing.T) {
|
|
unittest.PrepareTestEnv(t)
|
|
|
|
t.Run("events endpoint stays readable for repo readers", func(t *testing.T) {
|
|
ctx, resp := contexttest.MockContext(t, "/user2/repo1/projects/1/workflows/events")
|
|
contexttest.LoadRepo(t, ctx, 1)
|
|
ctx.SetPathParam("id", "1")
|
|
|
|
WorkflowsEvents(ctx)
|
|
|
|
require.Equal(t, http.StatusOK, resp.Code)
|
|
})
|
|
|
|
t.Run("options endpoint stays readable for repo readers", func(t *testing.T) {
|
|
ctx, resp := contexttest.MockContext(t, "/user2/repo1/projects/1/workflows/options")
|
|
contexttest.LoadRepo(t, ctx, 1)
|
|
ctx.SetPathParam("id", "1")
|
|
|
|
WorkflowsOptions(ctx)
|
|
|
|
require.Equal(t, http.StatusOK, resp.Code)
|
|
})
|
|
}
|